Kalles Group Logo

Kalles Group

Entra ID Engineer Consultant - Access Management & Identity Governance

Posted 5 Days Ago
Be an Early Applicant
In-Office
Seattle, WA, USA
135K-155K Annually
Mid level
In-Office
Seattle, WA, USA
135K-155K Annually
Mid level
Designs, builds, and operates Microsoft Entra ID access management and identity governance for a large workforce identity migration. Responsibilities include Conditional Access, passwordless authentication, PIM, SSO, provisioning, B2B controls, entitlement management, access reviews, lifecycle workflows, hybrid Active Directory and SailPoint integration, and automation using Microsoft Graph, PowerShell, and infrastructure-as-code. The role establishes engineering standards, documents designs, partners with SecOps, and mentors engineers.
The summary above was generated by AI

ABOUT KALLES GROUP:

Everyone deserves to be secure. Our mission at Kalles Group is to help secure the future for companies of all shapes and sizes.

While our expertise spans multiple disciplines, our method remains consistent: building trust and relationship with people -- whether you are a client, a consultant, or--in this case--a candidate.

No matter what role you come from--whether you're an executive or just starting your career-you can expect our highest level of attention and respect. We want to find the right fit for each role, but we also want you to find the right fit for your career.

We believe the best way to show you what our team is like is to treat you like you're already a part of it. We hope you'll consider joining our team of experienced professionals who are building their careers at Kalles Group—and having fun while doing it.


WHAT YOU WILL DO: 

As a Senior Microsoft Entra ID Engineer, you’ll be on assignment with one of our enterprise clients, helping lead a large workforce identity migration. Authentication for thousands of applications, including many complex SAML integrations, is moving from a legacy identity provider to Microsoft Entra ID. You’ll own the design, build and operation of access management and identity governance in Entra, and you’ll have a lot of autonomy. Your work will include Conditional Access and authentication strategy (phishing-resistant MFA and passwordless), Privileged Identity Management, application SSO and provisioning, B2B access, and the full Entra ID Governance suite: entitlement management, access reviews and lifecycle workflows. You’ll make Entra-native governance work cleanly alongside SailPoint Identity Security Cloud and hybrid Active Directory, and you’ll automate with Microsoft Graph, PowerShell and Infrastructure as Code. You’ll also set engineering standards and mentor other engineers on the team.

 

KEY RESPONSIBILITIES: 

ACCESS MANAGEMENT (Entra ID)
• Design and maintain Conditional Access architecture – persona/risk-based policies, device & location conditions, session controls, Authentication Strengths for phishing-resistant MFA.
• Own authentication methods strategy and rollout – passwordless/FIDO2/passkeys, Windows Hello for Business, certificate-based auth; retire weaker methods.
• Administer Privileged Identity Management (PIM) – eligible assignments, JIT activation, approvals, privileged role & PIM-for-groups reviews.
• Manage application access – enterprise app SSO (SAML/OIDC), app role assignments, SCIM provisioning.
• Design external identity / B2B controls – cross-tenant access settings, guest governance, partner access patterns.
 
IDENTITY GOVERNANCE (Entra ID Governance)
• Build and operate Entitlement Management – access packages, catalogs, policies, approval/expiration workflows, separation-of-duties checks.
• Design and run Access Reviews across groups, apps, privileged roles and guests, including recurring/automated reviews with auto-remediation.
• Implement Lifecycle Workflows – HR-driven joiner/mover/leaver and scheduled governance tasks.
• Configure HR-driven inbound provisioning and outbound SCIM app provisioning.
• Integrate Entra-native governance with SailPoint ISC and hybrid AD, defining ownership boundaries and avoiding duplicate controls.
 
ACROSS THE ROLE
• Automation and config-as-code (PowerShell, Microsoft Graph API / Graph PowerShell SDK, Terraform/Bicep).
• Produce reference designs, standards and documentation; review other engineers' designs/configs.
• Partner with SecOps so identity telemetry supports threat detection.
• Mentor engineers; act as Entra access/governance SME. Use AI tooling to accelerate design and documentation.

ABOUT YOU:

Your values:

    • Integrity: You believe in doing the right thing, even when it's uncomfortable, seemingly inefficient, or costly.
    • Purposefulness: You have a desire to serve others with your skillset and an openness to continuous learning and growth.
    • Ownership: You stick to your commitments, follow up with action, and seek clarity in communication & expectations.

YOUR EXPERIENCE:

Required Qualifications
• Bachelor's/master's in CS, Cybersecurity, IT, or equivalent experience.
• 4+ years in IAM or security engineering with a track record leading technical projects.
• Deep hands-on Microsoft Entra ID: Conditional Access, authentication methods, PIM, Entra ID Protection.
• Hands-on Entra ID Governance: entitlement management (access packages), access reviews, lifecycle workflows.
• Expert knowledge of SAML, OAuth 2.0, OIDC, SCIM and their security implications.
• Hybrid identity: Entra Connect / Cloud Sync with on-prem AD; governing access across both.
• Automating Entra via Microsoft Graph API / Graph PowerShell SDK; PowerShell, Python; Terraform or Bicep.
• System-level design thinking; able to set standards others build against.
• Clear communication with engineers and stakeholders; operates autonomously in a fast-paced environment.
Preferred Qualifications
• Certifications: SC-300, SC-100, AZ-500, CISSP, or SailPoint.
• Entra governance alongside an enterprise IGA (SailPoint IdentityNow / ISC).
• PAM familiarity (e.g., BeyondTrust) and how PAM and PIM complement each other.
• External/B2B identity at scale, cross-tenant collaboration, guest governance.
• ITDR exposure; feeding identity signals into SIEM/SOAR.
• Entra Verified ID, Permissions Management, or Global Secure Access.
• Large-scale retail, ecommerce, or high-transaction enterprise experience.
WHAT WE OFFER:
  • The annual salary range for this role is $135,000-$155,000.  
  • We offer Medical, Dental, Vision plans, 401K with matching, and PTO for salaried employees.
  • Work/life balance – we know there’s more to life than work! We encourage our team to pursue other passions, get outside, and spend time with family. We work with clients and consultants to set expectations for a manageable workload.

LOCATION:

This role is hybrid with onsite requirements at our client's location in Seattle, WA.  Therefore, we are currently only considering candidates that are already living in the Seattle area.

HOW TO APPLY:

Please fill out the form below (including uploading your most recent resume) and we'll be in touch! We know imposter syndrome can be a barrier to many great applicants. We hope you'll still consider applying. That's why we've made the application process as short and simple as possible.

Even if you're not a fit for the role, you can expect to hear back from us! We want you to have the best experience as a candidate, so please feel free to share feedback at any stage of the process to [email protected].

Kalles Group is an equal-opportunity employer and does not discriminate on the basis of creed, nationality, race, ethnicity, disability, gender, or other protected class.

HQ

Kalles Group Seattle, Washington, USA Office

1420 5th Ave, Seattle, WA, United States, 98101

Similar Jobs

8 Minutes Ago
Hybrid
Seattle, WA, USA
Senior level
Senior level
Financial Services
Leads cybersecurity architecture and enterprise security control development across multiple technology domains. Evaluates current and emerging technologies, guides risk and control assessments, advises business and technical stakeholders during vulnerabilities, and promotes secure SDLC practices. Uses authorized AI capabilities to accelerate security analysis and validation while ensuring data sensitivity, resiliency, auditability, and security requirements. Serves as a senior subject matter expert and provides technical direction to teams, contractors, and vendors.
Top Skills: AIAi/MlMobilePublic CloudSoftware Development Lifecycle (Sdlc)
9 Minutes Ago
Hybrid
Seattle, WA, USA
Senior level
Senior level
Financial Services
Investigates cybersecurity findings from assessments, incidents, red teams, and operations; performs root cause and risk analysis; prioritizes remediation; designs technical and procedural solutions; and communicates recommendations to technical teams, stakeholders, and senior leaders. Uses validated enterprise AI capabilities to accelerate evidence synthesis and reporting while maintaining security, resiliency, compliance, and data-handling standards.
Top Skills: CCloud ArchitecturesDlpEdr/XdrFirewallsIds/IpsJavaScriptPythonSIEMSoarVbscriptWeb Proxies
10 Minutes Ago
Hybrid
Seattle, WA, USA
Mid level
Mid level
Financial Services
Develops secure, scalable software solutions within an agile team. Responsibilities include application design, coding, testing, troubleshooting, architecture documentation, data analysis, visualization, and operational stability. The role also uses enterprise-authorized AI-assisted development tools responsibly, validates generated outputs, improves coding practices, and supports CI/CD, resiliency, and security standards.
Top Skills: Databricks

What you need to know about the Seattle Tech Scene

Home to tech titans like Microsoft and Amazon, Seattle punches far above its weight in innovation. But its surrounding mountains, sprinkled with world-famous hiking trails and climbing routes, make the city a destination for outdoorsy types as well. Established as a logging town before shifting to shipbuilding and logistics, the Emerald City is now known for its contributions to aerospace, software, biotech and cloud computing. And its status as a thriving tech ecosystem is attracting out-of-town companies looking to establish new tech and engineering hubs.

Key Facts About Seattle Tech

  • Number of Tech Workers: 287,000; 13% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Amazon, Microsoft, Meta, Google
  • Key Industries: Artificial intelligence, cloud computing, software, biotechnology, game development
  • Funding Landscape: $3.1 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Madrona, Fuse, Tola, Maveron
  • Research Centers and Universities: University of Washington, Seattle University, Seattle Pacific University, Allen Institute for Brain Science, Bill & Melinda Gates Foundation, Seattle Children’s Research Institute

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account